How Many Questions Of 156-315.80 Samples

NEW QUESTION 1
What is the minimum amount of RAM needed for a Threat Prevention Appliance?

• A. 6 GB
• B. 8GB with Gaia in 64-bit mode
• C. 4 GB
• D. It depends on the number of software blades enabled

Answer: C

NEW QUESTION 2
Which of these is an implicit MEP option?

• A. Primary-backup
• B. Source address based
• C. Round robin
• D. Load Sharing

Answer: A

NEW QUESTION 3
What is the SandBlast Agent designed to do?

• A. Performs OS-level sandboxing for SandBlast Cloud architecture
• B. Ensure the Check Point SandBlast services is running on the end user’s system
• C. If malware enters an end user’s system, the SandBlast Agent prevents the malware from spreading with the network
• D. Clean up email sent with malicious attachments

Answer: C

NEW QUESTION 4
Vanessa is firewall administrator in her company. Her company is using Check Point firewall on a central and several remote locations which are managed centrally by R77.30 Security Management Server. On central location is installed R77.30 Gateway on Open server. Remote locations are using Check Point UTM-1570 series appliances with R75.30 and some of them are using a UTM-1-Edge-X or Edge-W with latest available firmware. She is in process of migrating to R80.
What can cause Vanessa unnecessary problems, if she didn’t check all requirements for migration to R80?

• A. Missing an installed R77.20 Add-on on Security Management Server
• B. Unsupported firmware on UTM-1 Edge-W appliance
• C. Unsupported version on UTM-1 570 series appliance
• D. Unsupported appliances on remote locations

Answer: A

NEW QUESTION 5
John detected high load on sync interface. Which is most recommended solution?

• A. For short connections like http service – delay sync for 2 seconds
• B. Add a second interface to handle sync traffic
• C. For short connections like http service – do not sync
• D. For short connections like icmp service – delay sync for 2 seconds

Answer: A

NEW QUESTION 6
In a Client to Server scenario, which represents that the packet has already checked against the tables and the Rule Base?

• A. Big l
• B. Little o
• C. Little i
• D. Big O

Answer: D

NEW QUESTION 7
What is the port used for SmartConsole to connect to the Security Management Server?

• A. CPMI port 18191/TCP
• B. CPM port/TCP port 19009
• C. SIC port 18191/TCP
• D. https port 4434/TCP

Answer: A

NEW QUESTION 8
Check Pont Central Deployment Tool (CDT) communicates with the Security Gateway / Cluster Members over Check Point SIC _______ .

• A. TCP Port 18190
• B. TCP Port 18209
• C. TCP Port 19009
• D. TCP Port 18191

Answer: D

NEW QUESTION 9
What is the least amount of CPU cores required to enable CoreXL?

• A. 2
• B. 1
• C. 4
• D. 6

Answer: B

NEW QUESTION 10
In the Check Point Security Management Architecture, which component(s) can store logs?

• A. SmartConsole
• B. Security Management Server and Security Gateway
• C. Security Management Server
• D. SmartConsole and Security Management Server

Answer: B

NEW QUESTION 11
You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?

• A. Eliminate all possible contradictory rules such as the Stealth or Cleanup rules.
• B. Create a separate Security Policy package for each remote Security Gateway.
• C. Create network objects that restricts all applicable rules to only certain networks.
• D. Run separate SmartConsole instances to login and configure each Security Gateway directly.

Answer: B

NEW QUESTION 12
Which one of the following is true about Threat Extraction?

• A. Always delivers a file to user
• B. Works on all MS Office, Executables, and PDF files
• C. Can take up to 3 minutes to complete
• D. Delivers file only if no threats found

Answer: A

NEW QUESTION 13
Which of the completed statements is NOT true? The WebUI can be used to manage user accounts and:

• A. assign privileges to users.
• B. edit the home directory of the user.
• C. add users to your Gaia system.
• D. assign user rights to their home directory in the Security Management Server.

Answer: D

NEW QUESTION 14
What SmartEvent component creates events?

• A. Consolidation Policy
• B. Correlation Unit
• C. SmartEvent Policy
• D. SmartEvent GUI

Answer: B

NEW QUESTION 15
Which is not a blade option when configuring SmartEvent?

• A. Correlation Unit
• B. SmartEvent Unit
• C. SmartEvent Server
• D. Log Server

Answer: B

Explanation:
On the Management tab, enable these Software Blades: References:

NEW QUESTION 16
Please choose the path to monitor the compliance status of the Check Point R80.10 based management.

• A. Gateways & Servers --> Compliance View
• B. Compliance blade not available under R80.10
• C. Logs & Monitor --> New Tab --> Open compliance View
• D. Security & Policies --> New Tab --> Compliance View

Answer: C

NEW QUESTION 17
Which command gives us a perspective of the number of kernel tables?

• A. fw tab -t
• B. fw tab -s
• C. fw tab -n
• D. fw tab -k

Answer: B

NEW QUESTION 18
Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?

• A. UDP port 265
• B. TCP port 265
• C. UDP port 256
• D. TCP port 256

Answer: D

Explanation:
Synchronization works in two modes:
Full Sync transfers all Security Gateway kernel table information from one cluster member to another. It is handled by the fwd daemon using an encrypted TCP connection on port 256.
Delta Sync transfers changes in the kernel tables between cluster members. Delta sync is handled by the Security Gateway kernel using UDP connections on port 8116.

NEW QUESTION 19
What key is used to save the current CPView page in a filename format cpview_”cpview process ID”.cap”number of captures”?

• A. S
• B. W
• C. C
• D. Space bar

Answer: C

NEW QUESTION 20
What is UserCheck?

• A. Messaging tool used to verify a user’s credentials.
• B. Communication tool used to inform a user about a website or application they are trying to access.
• C. Administrator tool used to monitor users on their network.
• D. Communication tool used to notify an administrator when a new user is created.

Answer: B

NEW QUESTION 21
Fill in the blanks: A ________ license requires an administrator to designate a gateway for attachment whereas a ________ license is automatically attached to a Security Gateway.

• A. Formal; corporate
• B. Local; formal
• C. Local; central
• D. Central; local

Answer: D

NEW QUESTION 22
SmartConsole R80 requires the following ports to be open for SmartEvent R80 management:

• A. 19090,22
• B. 19190,22
• C. 18190,80
• D. 19009,443

Answer: D

NEW QUESTION 23
Which Check Point daemon monitors the other daemons?

• A. fwm
• B. cpd
• C. cpwd
• D. fwssd

Answer: C

NEW QUESTION 24
What is the command to check the status of the SmartEvent Correlation Unit?

• A. fw ctl get int cpsead_stat
• B. cpstat cpsead
• C. fw ctl stat cpsemd
• D. cp_conf get_stat cpsemd

Answer: B

NEW QUESTION 25
Which one of the following is true about Threat Emulation?

• A. Takes less than a second to complete
• B. Works on MS Office and PDF files only
• C. Always delivers a file
• D. Takes minutes to complete (less than 3 minutes)

Answer: D

NEW QUESTION 26
After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?

• A. Security Gateway IP-address cannot be changed without re-establishing the trust.
• B. The Security Gateway name cannot be changed in command line without re-establishing trust.
• C. The Security Management Server name cannot be changed in SmartConsole without re-establishing trust.
• D. The Security Management Server IP-address cannot be changed without re-establishing the trust.

Answer: A

NEW QUESTION 27
You have successfully backed up Check Point configurations without the OS information. What command would you use to restore this backup?

• A. restore_backup
• B. import backup
• C. cp_merge
• D. migrate import

Answer: D

NEW QUESTION 28
Fill in the blanks: In the Network policy layer, the default action for the Implied last rule is ______ all traffic. However, in the Application Control policy layer, the default action is _______ all traffic.

• A. Accept; redirect
• B. Accept; drop
• C. Redirect; drop
• D. Drop; accept

Answer: D

NEW QUESTION 29
Which of the following is NOT a VPN routing option available in a star community?

• A. To satellites through center only.
• B. To center, or through the center to other satellites, to Internet and other VPN targets.
• C. To center and to other satellites through center.
• D. To center only.

Answer: AD

NEW QUESTION 30
......